Description
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflow
exploit/windows/http/hp_nnm_openview5
Exploit-DB 2
- HP OpenView Network Node Manager (OV NNM) - 'OpenView5.exe' CGI Buffer Overflow (Metasploit) EDB-16805 · remote · May 9, 2010 · verified
- HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow EDB-4724 · remote · Dec 12, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 26741 vdb-entry
- ADV-2007-4111 vdb-entry
- 27964 third-party-advisory
- HPSBMA02281 vendor-advisory
- 4724 exploit
- 3441 third-party-advisory
- 1019055 vdb-entry
- hpopenview-nnm-unspecified-code-execution(38892) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-071.html
- 20071206 ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows mailing-list